ABSTRACT OF THE DISCLOSURE 

A surveillance and security system for automatic detection and warning of detected 
events includes a unit for observing behavior in a predetermined area under surveillance, a unit 
for processing an output of observed behavior from the unit for observing, and a includes a 
pattern recognition module for recognizing whether the observed behavior is associated with 
predefined suspicious behaviors. Upon recognition that the observed behavior is suspicious, 
security is notified about the potential need for increased surveillance, or automatically increased 
surveillance can be provided. The pattern recognition module may include infrared heat profiles 
of persons, images of actually people, sequences of people manipulating shopping bags, tearing 
sounds of tearing different types of packaging such as paper and plastic for retail products. The 
observation of motion, which is related to behavior, is compared against a database of 
predefined acts. In addition to motion, images, for example, of groups of teenagers could be used 
to identify potentially higher security risks in the area under surveillance. A method of detecting 
suspicious behavior provides a process that may use hardware other than described in the system. 
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